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REMARKS/ARGUMENTS 

This Amendment is being filed in response to the final Official Action of July 23, 2008 
and Advisory Action of November 7, 2008, and concurrent with a second Request for Continued 
Examination (RCE). Claims 1, 5, 10, 14, 19, 22-28 and 32-36 stand rejected under 35 U.S.C. § 
103(a) as being unpatentable over U.S. Patent No. 6,377,810 to Geiger et al., in view of U.S. 
Patent No. 7,240,015 to Karmouch et al. Claims 3, 12, 20 and 30 stand rejected as being 
unpatentable over Geiger in view of Karmouch, and further in view of U.S. Patent No. 6,377,810 
to Ganesh; Claims 4, 6, 8, 9, 13, 15, 17, 18, 21 and 31 stand rejected as being unpatentable over 
Geiger in view of Karmouch, and further in view of U.S. Patent Application Publication No. 
2004/0064707 to McCann et al; and Claims 7 and 16 stand rejected as being unpatentable over 
Geiger in view of Karmouch, and further in view of U.S. Patent Application Publication No. 
2002/0083183 to Pujare et al. 

As explained below, Applicant respectfully submits that the claimed invention is 
patentably distinct from Geiger, Karmouch, Ganesh, McCann and Pujare, taken individually or 
in any proper combination. Nonetheless, Applicant has amended various ones of the claims to 
further clarify the claimed invention. In view of the amendments to the claims and the remarks 
presented herein, Applicant respectfully requests reconsideration and allowance of all of the 
pending claims of the present application. 

A. Claims 1, 5, 10, 14, 19, 22-28 and 32-36 are Patentable 

Claims 1, 5, 10, 14, 19, 22-28 and 32-36 stand rejected as being unpatentable over 
Geiger, in view of Karmouch. According to one aspect of the claimed invention, as reflected by 
amended independent Claim 10, a system for controlling access to an event includes first and 
second network entities, and an event server maintaining an event. The first network entity is 
configured to control access to event-based information available within a network and 
associated with the event. In this regard, the first network entity is configured to receive, from 
the second network entity, a request to access event-based information, where the second 
network entity may be unknown to the first network entity prior to the first network entity 
receiving the request. In this regard, the request may be received without a certificate of the 
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second network entity (for use in receiving consent or creating an authorization), and the first 
network entity may not include a mechanism for verifying an identity of the second network 
entity. 

The first network entity is configured to receive consent to access the event-based 
information associated with the event, automatically create an authorization in response to 
receiving the consent, and thereafter transmit the authorization. In this regard, as amended, the 
first network entity is configured to receive the consent and automatically create the 
authorization without use of a certificate from the second network entity and without verifying 
an identity of the second network entity. The second network entity is configured to receive the 
authorization, and thereafter transmit a subscription message. The subscription message includes 
the authorization and an event package describing the event-based information. Finally, the 
event server is configured to receive the subscription message, and thereafter determine whether 
to accept the subscription message based upon the authorization. 

As explained in response to the final Official Action, in contrast to amended independent 
Claim 10, neither Geiger nor Karmouch, taken individually or in any combination, teaches or 
suggests controlling access to an event whereby the entity controlling access to event-based 
information (first network entity) receives a request to access that information from another 
entity (second network entity) unknown to the first network entity prior to receiving the request. 
More particularly, and as now recited by amended independent Claim 10, neither Geiger nor 
Karmouch, taken individually or in any combination, teaches or suggests controlling access to an 
event whereby the entity controlling access to event-based information (first network entity) may 
receive consent and may create an authorization without use of a certificate from the requesting 
entity (second network entity), and without verifying an identity of the requesting entity . 

As cited, Geiger may disclose a mobile device granting a requesting entity to receive 
location information for that device, but Geiger does not teach or suggest that the requesting 
entity is unknown to the mobile device before the mobile device receives a request for its 
location information; instead, Geiger discloses that its mobile device and requesting entity are 
preferably members of the same security domain. According to Geiger, its mobile device 15 
either receives the certificate from requesting device 25 that the mobile device 25 can verify, 
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since it has it or has the means to obtain such certificate for verification. See Geiger, col. 3, 11. 
58-65 (explaining that "the requesting entity 25 preferably includes a digital signature of ... i.e., 
the requesting entity and the mobile device share a common root key in the domain of the 
requesting entity"); and id. at col. 4, 11. 1-6 ("If the requesting entity 25 has the signed message, 
and the mobile device does not have certificate of the requesting entity, or means to obtain such 
certificate, the requesting entity must send this certificate with the permission request."). It is in 
this sense that the requesting entity 25 is "known" to the mobile device 15. 

Similarly, Karmouch discloses an authorization server receiving a request to perform an 
action from a requester agent, and determining the authorization of the requester agent to 
perform the action based on an authorization policy that defines a relationship between a 
requester agent and an action, and includes a subject specifying the agent to which the 
authorization applies. As the authorization server receives authorization policies that specify the 
requester agents to which the policies apply, and as these policies are necessary for the 
authorization server to authorize a requester agent to a requested action, the requester agent is in 
fact known to authorization server of Karmouch (similar to that of Geiger) prior to the request 
from the requester agent. And further Karmouch explicitly discloses that before a requester 
agent is authorized, that agent is first authenticated (i.e., the identity of the requester agent is 
verified). See Karmouch, col. 7, 11. 5-6 ("Each agent who requests an authorization is first 
authenticated."). Amended independent Claim 10, on the other hand, recites that the requesting 
entity (second network entity) is unknown to the entity controlling access to event-based 
information (first network entity) prior to the request being received by the entity controlling 
access, and in this regard, recites that consent may be received and the authorization may be 
created without use of a certificate from the second network entity and without verifying an 
identity of the second network entity. 

Finally, Applicant notes that the Advisory Action cites both Geiger and Karmouch 
disclosing a requesting entity sending its identification to the access-controlling entity (by a 
certificate in Geiger, and agent identification in Karmouch). The Advisory Action alleges that in 
both references, then, the requesting entity is therefore unknown to the access-controlling entity 
until the requesting entity's identification is received by the access-controlling entity, similar to 
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the claimed invention. Applicant respectfully disagrees, however, and submits that a requesting 
entity identifying itself in a request to an access-controlling entity is not in fact tantamount to the 
requesting entity being unknown to the access-controlling entity before that request. 

In many communication schemes (from paper-based letters to telephone calls to 
electronic communication), the source of a communication may identify itself in connection with 
delivery of that communication to its destination. This alone, however, does not mean that the 
source is unknown to the destination prior to the communication being delivered to the 
destination, as suggested by the Advisory Action. It merely serves to attribute the 
communication to the source so that the destination knows from where the communication 
originated. At most, then, one could argue that the identifications in Geiger and Karmouch 
identified by the Advisory Action may be tantamount to the origin of a request being unknown to 
the access-controlling until identified in the request. But nothing in Geiger or Karmouch 
supports that the requesting entity is itself unknown to the access-controlling entity, similar to 
amended independent Claim 10. 

Applicant therefore respectfully submits that amended independent Claim 10, and by 
dependency Claims 12-18, 23, 26 and 34, is patentably distinct from Geiger and Karmouch, 
taken individually or in any proper combination. Applicant also respectfully submits that 
amended independent Claims 1, 19 and 28 recite subject matter similar to that of independent 
Claim 10, including the aforementioned consent and automatic authorization-creation features 
with receipt of a request from a network entity unknown prior to the request, and without a 
certificate of the requesting entity and without verifying the requesting entity's identity. As 
such, Applicant also respectfully submits that amended independent Claims 1, 19 and 28, and by 
dependency Claims 3-9, 20-22, 24, 25, 27, 30-33, 35 and 36, are also patentably distinct from 
Geiger and Karmouch, taken individually or in any proper combination, for at least the reasons 
given above. 

For at least the foregoing reasons, Applicant respectfully submits that the rejection of 
Claims 1, 5, 10, 14, 19, 22-28 and 32-36 as being unpatentable over Geiger, in view of 
Karmouch is overcome. 
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B. Claims 3, 12, 20 and 30 are Patentable 

The Official Action rejects Claims 3, 12, 20 and 30 as being unpatentable over Geiger in 
view of Karmouch, and further in view of Ganesh. As explained above, amended independent 
Claims 1, 10, 19 and 28, and by dependency Claims 3-9, 12-18, 20-27 and 30-36, are patentably 
distinct from Geiger and Karmouch, taken individually or in any proper combination. Applicant 
respectfully submits that Ganesh does not cure the deficiencies of Geiger and Karmouch. That 
is, even considering Ganesh, none of Geiger, Karmouch or Ganesh, taken individually or in any 
proper combination, teaches or suggests the aforementioned consent and automatic 
authorization-creation features with receipt of a request from a network entity unknown prior to 
the request, and without a certificate of the requesting entity and without verifying the requesting 
entity's identity, as per independent Claims 1, 10, 19 and 28. Applicants therefore respectfully 
submit that independent Claims 1, 10, 19 and 28, and by dependency Claims 3-9, 12-18, 20-27 
and 30-36, are patentably distinct from Geiger, Karmouch and Ganesh, taken individually or in 
any proper combination. 

For at least the foregoing reasons, Applicants submit that the rejection of Claims 3, 12, 20 
and 30 as being unpatentable over Geiger in view of Karmouch, and further in view of Ganesh is 
overcome. 

C. Claims 4, 6, 8, 9, 13, 15, 17, 18, 21 and 31 are Patentable 

The Official Action rejects Claims 4, 6, 8, 9, 13, 15, 17, 18, 21 and 31 as being 
unpatentable over Geiger in view of Karmouch, and further in view of McCann. As explained 
above, independent Claims 1, 10, 19 and 28, and by dependency Claims 3-9, 12-18, 20-27 and 
30-36, are patentably distinct from Geiger and Karmouch, taken individually or in any proper 
combination. Applicant respectfully submits that McCann does not cure the deficiencies of 
Geiger and Karmouch. That is, even considering McCann, none of Geiger, Karmouch or 
McCann, taken individually or in any proper combination, teach or suggest the aforementioned 
consent and automatic authorization-creation features with receipt of a request from a network 
entity unknown prior to the request, and without a certificate of the requesting entity and without 
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verifying the requesting entity's identity, as per independent Claims 1, 10, 19 and 28. Applicants 
therefore respectfully submit that independent Claims 1, 10, 19 and 28, and by dependency 
Claims 3-9, 12-18, 20-27 and 30-36, are patentably distinct from Geiger, Karmouch and 
McCann, taken individually or in any proper combination. 

For at least the foregoing reasons, Applicants submit that the rejection of Claims 4, 6, 8, 
9, 13, 15, 17, 18, 21 and 31 as being unpatentable over Geiger in view of Karmouch, and further 
in view of McCann is overcome. 

D. Claims 7 and 16 are Patentable 

The Official Action rejects Claims 7 and 16 as being unpatentable over Geiger in view of 
Karmouch, and further in view of Pujare. As explained above, independent Claims 1, 10, 19 and 
28, and by dependency Claims 3-9, 12-18, 20-27 and 30-36, are patentably distinct from Geiger 
and Karmouch, taken individually or in any proper combination. Applicant respectfully submits 
that Pujare does not cure the deficiencies of Geiger and Karmouch. That is, even considering 
Pujare, none of Geiger, Karmouch or Pujare, taken individually or in any proper combination, 
teach or suggest the aforementioned consent and automatic authorization-creation features with 
receipt of a request from a network entity unknown prior to the request, and without a certificate 
of the requesting entity and without verifying the requesting entity's identity, as per independent 
Claims 1, 10, 19 and 28. Applicants therefore respectfully submit that independent Claims 1,10, 
19 and 28, and by dependency Claims 3-9, 12-18, 20-27 and 30-36, are patentably distinct from 
Geiger, Karmouch and Pujare, taken individually or in any proper combination. 

For at least the foregoing reasons, Applicants submit that the rejection of Claims 7 and 16 
as being unpatentable over Geiger in view of Karmouch, and further in view of Pujare is 
overcome. 
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CONCLUSION 



In view of the amendments to the claims and the remarks presented above, Applicant 
respectfully submits that the present application is in condition for allowance. As such, the 
issuance of a Notice of Allowance is therefore respectfully requested. In order to expedite the 
examination of the present application, the Examiner is encouraged to contact Applicant's 
undersigned attorney in order to resolve any remaining issues. 

It is not believed that extensions of time or fees for net addition of claims are required, 
beyond those that may otherwise be provided for in documents accompanying this paper. 
However, in the event that additional extensions of time are necessary to allow consideration of 
this paper, such extensions are hereby petitioned under 37 CFR § 1.136(a), and any fee required 
therefore (including fees for net addition of claims) is hereby authorized to be charged to Deposit 
Account No. 16-0605. 
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